/*
 * To change this template, choose Tools | Templates
 * and open the template in the editor.
 */
package servlet;

import entity.Utente;
import java.io.IOException;
import java.io.PrintWriter;
import java.sql.*;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.annotation.Resource;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import javax.sql.DataSource;

/**
 *
 * @author sflesca
 */
public class LoginServlet extends HttpServlet {

    @Resource(name = "NegozioDS")
    private DataSource negozioDS;

    /**
     * Processes requests for both HTTP
     * <code>GET</code> and
     * <code>POST</code> methods.
     *
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        response.setContentType("text/html;charset=UTF-8");
        PrintWriter out = response.getWriter();
        Connection con = null;
        PreparedStatement stm = null;
        ResultSet rst = null;
        Utente u = null;
        try {
            con = negozioDS.getConnection();
            stm = con.prepareStatement("SELECT * FROM utenti where login=? AND pwd = ?");
            String login = request.getParameter("login");
            String pwd = request.getParameter("pwd");
            if ((login == null) || (pwd == null)) {
                out.println("<html>");
                out.println("<head>");
                out.println("<title>Servlet LoginServlet</title>");
                out.println("</head>");
                out.println("<body>");
                out.println("<h1>Specificare nome utente e password");
                out.println("</body>");
                out.println("</html>");
            } else {
                stm.setString(1, login);
                stm.setString(2, pwd);
                rst = stm.executeQuery();
                if (rst.next()) {
                    u = new Utente(rst.getInt(1), rst.getString(2), rst.getString(3), rst.getString(4), rst.getString(5));
                    HttpSession session = request.getSession(true);
                    session.setAttribute("utente", u);
                                out.println("<html>");
            out.println("<head>");
            out.println("<title>Servlet LoginServlet</title>");
            out.println("</head>");
            out.println("<body>");
            out.println("<h1>Benenuto"+u.getName()+"</h1>");
            out.println("<p><a href=listaProdotti>prodotti</a></p>");
            out.println("</body>");
            out.println("</html>");
                } else {
                    out.println("<html>");
                    out.println("<head>");
                    out.println("<title>Servlet LoginServlet</title>");
                    out.println("</head>");
                    out.println("<body>");
                    out.println("<h1>Utente inesistente");
                    out.println("</body>");
                    out.println("</html>");
                }
            }
        } catch (SQLException ex) {
            Logger.getLogger(LoginServlet.class.getName()).log(Level.SEVERE, null, ex);
        } finally {            
            try {
                out.close();
                if(rst!=null) rst.close();
                if(stm!=null) stm.close();
                if(con!=null) con.close();
            } catch (SQLException ex) {
                Logger.getLogger(listaProdotti.class.getName()).log(Level.SEVERE, null, ex);
            }
        }
    }

    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /**
     * Handles the HTTP
     * <code>GET</code> method.
     *
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /**
     * Handles the HTTP
     * <code>POST</code> method.
     *
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /**
     * Returns a short description of the servlet.
     *
     * @return a String containing servlet description
     */
    @Override
    public String getServletInfo() {
        return "Short description";
    }// </editor-fold>
}
